Missing Authorization Vulnerability in Wise Analytics Plugin for WordPress

CVE-2025-14609

What is CVE-2025-14609?

The Wise Analytics plugin for WordPress has a missing authorization vulnerability, affecting all versions up to and including 1.1.9. This flaw arises from the absence of crucial capability checks on the REST API endpoint '/wise-analytics/v1/report'. As a result, unauthenticated attackers can exploit this vulnerability to gain unauthorized access to sensitive analytics data such as administrator usernames, login timestamps, visitor tracking information, and business intelligence data by sending unauthenticated requests. This situation underscores the importance of implementing stricter access controls to safeguard sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References